Linux Today: Linux News On Internet Time.
Search Linux Today
search.internet.com
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

internet.commerce
Be a Commerce Partner

Memory
Imprinted Promotions
Web Hosting Directory
Promote Your Website
Auto Insurance Quote
Televisions
Web Design
Promotional Products
Promotional Items
Calling Cards
Desktop Computers
Logo Design
Online Education
Promotional Golf

The Linux Channel at internet.com
Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

 
Webcast: Hacking 101--The Top 10 Attacks in Web Applications
Defend your web applications from attack. Learn about the three most common web application attacks, including how they occur and what can be done to prevent them. Well also discuss manual versus automated approaches for scanning and identifying web application vulnerabilities and how IBM Rational AppScan, an automated vulnerability scanner, can help you automate more of what you are doing manually today. View the webcast;
Featured on the DevX Skillbuilding for IBM Developerworks

Featured Solutions for Technology Professionals from Internet.com
PDF: Storage Is Changing Fast--Are You Ready?
Sponsored by HP
The storage landscape is headed for dramatic change, thanks to new technologies like Fibre Channel over Ethernet (FCoE), pNFS, object-based storage and SAS that will affect everything from NAS and SANs to disk drives. Get the knowledge you need to make the most of your storage environment, now and in the future. >>

Featured Solutions for Technology Professionals from Internet.com
Relieve the Training Bottleneck with Rapid E-Learning
Sponsored by Adobe
As product life-cycles decrease and speed-to-market pressures increase, the ability to train workers efficiently becomes paramount to a company's ability to compete. Rapid e-learning can make a significant contribution to your training efforts in your organization. Download this whitepaper to learn more.

Current Newswire:

Ruiz Out, Meyer In At AMD

Third Annual Open Source CMS Award Launched

Virtual Hosting With Proftpd And MySQL (Incl. Quota) On Fedora 9

Hosted Zimbra Email Catches On With Managed Service Providers

An Open Source Seeing Eye Dog for Web Surfers

Perl and Bash Versions Of Binary To Decimal Conversion Script

E4X: JavaScript on Steroids

Linux 2.6.26 Kernel Benchmarks

Is Selling Linux Evil?

JUNOS: Open, But Not Open Source

Oracle Database Administrator
Professional Technical Resources
US-OR-Portland

Justtechjobs.com Post A Job | Post A Resume
:Multiple Unpatched Vulnerabilities in Open Source CMS Mambo
Multiple Unpatched Vulnerabilities in Open Source CMS Mambo
Jan 30, 2008, 19 :30 UTC (0 Talkback[s]) (2028 reads)

"SecurityFocus has on Monday reported vulnerabilities in the open source content management system Mambo, which could be exploited by attackers to view confidential information or compromise a system. Four flaws have been found, and as yet no fix has been issued.

"The mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php script fails to correctly filter the content of the file[NewFile][tmp_name] parameter, so that crafted arguments can be used to delete files such as configuration.php on the server..."

Complete Story

Related Stories:
Infosec Writers: Detecting Botnets Using a Low Interaction Honeypot(Mar 28, 2006)
Netcraft: Hackers Targeting Mambo Security Holes(Mar 10, 2006)
vnunet: Linux Worm Turns on Mambo and PHP(Feb 20, 2006)



No talkbacks posted.
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!


eKit: Web Application Security
Microsoft Article: The Progress and Promise of Deep Zoom
VMware Whitepaper: From Fixed To Fluid--Enabling the Data Center Metamorphosis
Article: How Developers Can Blend Messaging, Voice and Conferencing with Next-Generation Applications
Walkthrough: Building a Mobile Game in Visual Studio 2008

..............................


All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP

JupiterOnlineMedia

internet.comearthweb.comDevx.commediabistro.comGraphics.com

Search:

Jupitermedia Corporation has two divisions: Jupiterimages and JupiterOnlineMedia

Jupitermedia Corporate Info


Legal Notices, Licensing, Reprints, & Permissions, Privacy Policy.

Advertise | Newsletters | Tech Jobs | Shopping | E-mail Offers